Does McAfee intend on giving us a way to allow us to Pilot test the distribution of patches?? ie: AV 8.7 patch 3
What do other people do besides a manual install? (looking to pilot aprox. 150 machines)
I think you can do this by checking the patch into the Evaluation branch in ePO's repository. Then set the update task for your group of test systems to check for VSE 8.7 patches and set their Agent policy to get VSE patches from the Evaluation branch.
Unfortunately that would only work once you have the extension for epo 4.5 patch 1 installed as that is supposed to make the other branches available for patches. Previously they were just available for full installs. We also use a method involving custom props (requires agent 4.5) which allows us to push out the simple registry key for that. Once it is deployed and being reported back by your agents you can setup tag groups that label these machines as pilots and do your patch testing with those. Let me know if you need more information.
Take the file I have attached and modify the 'CustomProps1' field to whatever terms you would like. We use three phase pilots and label them as such. You can then push this out to your pilot machines via SMS or some other method. Once that is pushed out you can create a tag like this:
I was under the impression that you could not check patches into the Evaluation Branch. Is that not longer the case? EPO console 4.5 P1 here with 4.5 agents and VSE 8.7 P2. the last time a McAfee rep remote assisted me with Patch 2 and it blasted patch 2 to every machine at 5:00 p.m. EST (Update task defined for that time).
I am very interested in this because I, like the original poster, need to evaluate the patch with a small number before kicking it off to the entire company again.Message was edited by: kire98 on 9/1/10 10:01:50 AM GMT-05:00